What’s Vulnerable › Vulnerabilities

CVE-2019-5235

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-12-14 · updated 2026-06-17
• Weakness: CWE-476

Description

Some Huawei smart phones have a null pointer dereference vulnerability. An attacker crafts specific packets and sends to the affected product to exploit this vulnerability. Successful exploitation may cause the affected phone to be abnormal.

Affected products

• Huawei Alp-Al00B Firmware: 8.0.0.153(c00)
• Huawei Alp-Tl00B Firmware: 8.0.0.129(sp2c01)
• Huawei Bla-Al00B Firmware: 8.0.0.129(sp2c786), 8.0.0.153(c00)
• Huawei Bla-Tl00B Firmware: 8.0.0.129(sp2c01)
• Huawei Charlotte-Al00A Firmware: 8.1.0.176(c00)
• Huawei Charlotte-Tl00B Firmware: 8.1.0.176(c01)
• Huawei Columbia-Al10B Firmware: 8.1.0.163(c00)
• Huawei Columbia-Al10I Firmware: 8.1.0.150(c675custc675d2)
• Huawei Columbia-L29D Firmware: 8.1.0.146(c461), 8.1.0.148(c185), 8.1.0.151(c10), 8.1.0.151(c432)
• Huawei Columbia-Tl00D Firmware: 8.1.0.186(c01gt)
• ELLE-AL00B: 9.1.0.162(c00e160r2p1)
• Huawei Elle-Tl00B Firmware: 9.1.0.162(c01e160r2p1)
• Huawei Technologies Co., Ltd. Emily-AL00A: 8.1.0.190(c00)
• Huawei Emily-Tl00B Firmware: 8.1.0.175(c01)
• Huawei Ever-Al00B Firmware: 9.0.0.195(c00e195r2p1)
• Huawei Ever-L29B Firmware: 9.0.0.206(c185e3r3p1), 9.0.0.207(c636e3r2p1), 9.0.0.208(c432e3r1p12)
• Huawei Harry-Al00C Firmware: 9.1.0.206(c00e205r3p1)
• Huawei Harry-Al10B Firmware: 9.1.0.206(c00e205r3p1)
• Huawei Harry-Tl00C Firmware: 9.0.1.162(c01e160r2p3)
• Huawei Hima-AL00B: 9.0.0.200(c00e200r2p1)
• Huawei Jackman-L21 Firmware: 8.2.0.160(c185)
• Huawei Jackman-L22 Firmware: 8.2.0.156(c636r2p2)
• Huawei Jackman-L23 Firmware: 8.2.0.152(c45custc45d1), 8.2.0.162(c605)
• Huawei Johnson-Al00Ic Firmware: 8.2.0.161(c675custc675d1)
• Huawei Johnson-Al10C Firmware: 8.2.0.165(c00r1p16)
• Huawei Johnson-L21C Firmware: 8.2.0.130(c461r1p1), 8.2.0.131(c10r2p2), 8.2.0.136(c432custc432d1)
• Huawei Johnson-L21D Firmware: 8.2.0.101(c10custc10d1), 8.2.0.101(c432custc432d1), 8.2.0.131(c55custc55d1)
• Huawei Johnson-L22C Firmware: 8.2.0.105(c185r1p1), 8.2.0.107(c636r2p1)
• Huawei Johnson-L22D Firmware: 8.2.0.105(c185r2p1), 8.2.0.107(c636r2p1)
• Huawei Johnson-L23C Firmware: 8.2.0.130(c636custc636d2), 8.2.0.133(c605custc605d1)

References

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190821-01-smartphone-en
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190821-01-smartphone-en

Get alerted when CVE-2019-5235 or the next vulnerability affects your stack